“Chosen-Key Distinguishers on 12-Round Feistel-SP and 11-Round Collision Attacks on Its Hashing Modes”. 2016. IACR Transactions on Symmetric Cryptology 2016 (1): 13-32. https://doi.org/10.13154/tosc.v2016.i1.13-32.